Privacy Policy

Last updated: July 19, 2026

1. Data Controller

PhasmaVPN, registered in France, is the data controller responsible for personal data processed in connection with the Service. Contact: [email protected].

2. Data We Collect

PhasmaVPN processes a minimal set of technical data to operate the VPN service. For the complete and detailed list of what we collect, see our No-Log Policy.

3. Data We Do NOT Collect

We do not collect browsing data, DNS queries, traffic content, or personal identifiers. For the complete list of what we never collect, see our No-Log Policy.

4. Data Minimisation (GDPR)

In accordance with Article 5.1(c) of the GDPR, we collect only the minimum technical data strictly necessary to operate the VPN service. No data is collected beyond what is required for the connection to function.

5. Data Sharing

We do not sell, rent, or share your data with third parties. The only external processor is Sentry, for technical crash reports. Crash reports are automatically deleted from Sentry at the beginning of each month. We cannot provide browsing history, DNS queries, or traffic content because we do not have them. For complete technical details, see our No-Log Policy.

6. International Data Transfers

VPN servers are located in the countries shown in the app. Where data is transferred outside the European Economic Area, we apply Standard Contractual Clauses as required by GDPR.

7. Data Retention

Your app settings and WireGuard key pair are stored on your device only and are removed when you uninstall the application.

8. Your Rights

Under the GDPR and applicable laws, you have the right to:

• Access: request what data we hold linked to your WireGuard public key
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Restriction: request limited processing of your data
• Lodge a complaint with your national data protection authority

9. How to Exercise Your Rights

To exercise any of the above rights, email [email protected]. Because the Service requires no account, please provide your WireGuard public key so we can locate your data. We will respond within 30 days.

10. Cookies

Our website uses only essential technical cookies required for its operation. We do not use advertising, tracking, or analytics cookies.

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children. Contact [email protected] if you believe a child has used the Service.

12. Security Measures

We implement TLS 1.3 for all API and website traffic, WireGuard with ChaCha20-Poly1305 for VPN tunnels, AES-256 encryption for relay traffic, and strict access controls on all infrastructure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or on our website. Continued use after the effective date constitutes acceptance.

14. Contact

Privacy questions: [email protected]